[Bug 487] Shark Unable to Stroke shape (private data) Exception

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=487





------- Comment #1 from xerxes at zafena.se  2010-06-08 08:47 -------
this bug passes a bogus jobject pointer (see sr and obj below) from jit code to
jni code: in most cases this bogus pointer makes jni_GetLongField fail the
lookup of the LongField and return a null, ... that will in turn eventually
trigger a generation of a nullpointer exception in
openjdk/jdk/src/share/native/sun/java2d/pipe/ShapeSpanIterator.c:311    
in some cases this bogus jobject pointer triggers a sigsegv.

#0  jni_GetLongField (env=<value optimized out>, obj=0x0, fieldID=0x22)
    at
/media/disk/icedtea6-shark/openjdk/hotspot/src/share/vm/runtime/jniHandles.hpp:190
#1  0x56a01750 in Java_sun_java2d_pipe_ShapeSpanIterator_lineTo (env=0x1c7d38,
sr=0x0, x1=0, 
    y1=3.36247349) at
../../../src/share/native/sun/awt/../java2d/pipe/ShapeSpanIterator.c:309
#2  0x5668d600 in ?? ()   <----  sun.java2d.pipe.ShapeSpanIterator::lineTo


[0x5668d560-0x5668d690): sun.java2d.pipe.ShapeSpanIterator::lineTo (304 bytes
code)

interestingly this bug only triggers after
sun.java2d.pisces.PiscesRenderingEngine.lineTo have ben compiled.

the chain of failure are
(jit) sun.java2d.pisces.PiscesRenderingEngine.lineTo -> (jit jni wrapper)
sun.java2d.pipe.ShapeSpanIterator::lineTo -> (jni)
Java_sun_java2d_pipe_ShapeSpanIterator_lineTo   and here the second jobject
argument contains a bogus pointer. 

is it possible for target->method_holder()->klass_part()->java_mirror() in
sharkNativeWrapper::initialize to return null? 


-- 
Configure bugmail: http://icedtea.classpath.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.